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Question: 1 


An airline built and deployed a back-end application to manage reservations. To support 
interoperability with as large a base of standalone client applications as possible, the services 
provided by this back-end application are exposed as XML-based restful web services. Management 
just added a new requirement that AJAX-based web application clients be supported, too. One of the 
developers suggested that it is enough to extend the existing application to support both XML-based 
and JSON-based restful web services. Assuming the developer is correct, choose the sentence that 
best describes an attempt to introduce this ability as this developer suggests (Choose one): 


A. The attempt will fail, because JAX-RS does not support both XML- and JSON- based restful services 
in parallel. 

B. The attempt will be trivial to implement, since JAX-RS just needs for the application to specify that 
both XML- and JSON-based interaction will be supported. 

C. The attempt can succeed, but it will require a significant amount of new code, since JAX-RS does 
support both XML- and JSON-based interaction - but not single resource can support both kinds of 
interaction simultaneously. 

D. The attempt will fail, because there is more to the difference between XML-based and JSONbased 
interactions than just the data representation used. 


Answer: B 


Question: 2 


A company is refactoring an existing website to use Web services clients. The application retrieves 
lists of parts and displays them to the users in a browser window. Previously, the data was stored as 
files on the web server and, in order to access the files, the user would simply click on a hyperlink. 
Now the data must be dynamically generated via a service that another developer has created. They 
want the easiest way to refactor their website to use Web services. Which three client-side 
technologies should they use? (Choose three.) 


A. SOAP 

B. REST 

C. Javascript 
D. XML 

E. JSON 

F. JAVA 


Answer: B,C,E 


Question: 3 


In the code fragment below, the client will use os to upload data to the web service provider. 
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URL url = new URL{urlString): 
HttpURLConnection connection = 
(HttpURLConnection) url _openConnection( }: 

connection setRequestMethod{ "POST" )- 

// statement missing? 

connection. setDoInput (true): 

connection. connect (}: 

OutputStream os = connection. getOutputStream{ ); 


Choose the statement that must be placed in line 5, to ensure this fragment works as intended. 
(Choose one) 


A. connection.setDoOutput(true); 

B. connection.setAllowUserInteraction(true); 

C. connection.setlfModifiedSince(new Date().getTime()); 
D. connection.setUseCaches(false); 


Answer: A 


Question: 4 


Given the resource class fragment: 


@Path({ "/resource" ) 

class Resource { 
@Path("“id")} @POST 
String update({.._} { } 
@Path({"/~id")} @GET 
String getId() { } 


And given the web xmi fragment 


<servlet> 
<servlet—namne>Jersey< “servlet—name> 
<servlet-class> 
com.sun.jersey spl container servlet ServletContainer 
</servlet-class> 


</servlet> 
<servlet—mapping> 
<serylet—name>Jersey</servlet—name> 
<url—pattern>/rest</url—pattern> 
</servlet—mapping> 
Choose the code fragment below that would secure access only to the Resource update() method 
(Choose one): 


A. <security-constraint> 
<web-resource-collection> 
<url-pattern>/rest</url-pattern> 
<http-method>GET</http-method> 
<http-method>POST</http-method> 
</web-resource-collection> 

B. <security-constraint> 
<web-resource-collection> 
<url-pattern>/rest</url-pattern> 


https://www.certkillers.net 


Questions & Answers PDF Page 4 


<http-method>POST</http-method> 
</web-resource-collection> 

C. <security-constraint> 
<web-resource-collection> 
<url-pattern>/rest/id</url-pattern> 
<http-method>POST</http-method> 
<http-method>GET</http-method> 
</web-resource-collection> 

D. <security-constraint>D.<security-constraint> 
<web-resource-collection> 
<url-pattern>/id</url-pattern> 
<http-method>POST</http-method> 
</web-resource-collection> 


Answer: B 


Question: 5 


An organization has business logic implemented in EJB components. Current clients use container- 
managed, role-based security to access the business logic using RMI. Management has determined 
that the business logic must be made available to non-RMI clients using a Web service. Which 
container-managed Web service security mechanism would the development team? use to allow 
Web service clients to use the current security model? (Choose one) 


A. XKMS 

B. XACML 

C. XML Digital Signature 

D. HTTP Basic Authentication 

E. annotations mapped to the JAX-WS runtime 


Answer: D 


Question: 6 


A developer creates a Web service for his company's inventory service. He uses servlet container to 
deploy the web service and wants to enable basic authentication for all web service invocations. 
Where does the developer configure security requirements for the above case? 


A. sun-jaxws.xml 
B. web.xml 

C. webservices.xml 
D. domain.xml 


Answer: B 


Question: 7 
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Choose the option that best describe the deployer's choices, when deploying an EJB that is also 
exposed as a RESTful web service using JAX-RS (Choose one): 


A. The EJB can only be deployed to a web container, since RESTful access to the EJB requires a web 
container to support the HTTP interaction needed. 

B. The EJB can be deployed to any EJB or web container that would support local references to the 
EJB from the JAX-RS runtime in the ejb container. 

C. The EJB can be deployed to any EJB or web container that would support local references to the 
EJB from the JAX-RS runtime in the web container. 

D. The EJB can be deployed to an EJB or web container that is visible to the JAX-RS runtime, even on 
an application server separate from the JAX-RS runtime, since EJBs support local or remote 
interactions via RMI. 


Answer: C 


Question: 8 


Given the JAX-RS root resource class fragment: 

@Path("/res") 

@Stateless 

@RolesdAllowed({"client", "admin"}) 

class Resource { 
Choose the statement that best describes the configuration that would be required to support the 
access control constraint shown: 


A. No further configuration is required - the JavaEE runtime will pick up the security constraint and 
configure the web container to match. 

B. The developer will have to configure the web container to require authenticated access to the 
URLs corresponding to this resource, so the proper information can be propagated to the EJB 
container. 

C. The developer will have to turn on authentication in the web container configuration file, so that 
all incoming requests are authenticated in order to be processed. 

D. The developer will have to configure the web container to require authenticated access to the 
URLs corresponding to this resource, and then map web-tier roles to ejb-tier roles, since the JAXRS 
and EJB runtimes cannot use the same set of roles. 


Answer: B 


Question: 9 


A developer needs to write a Web service that supports user sessions that timeout after 120 
seconds. Which configuration file is correct for the developer use? (Choose one) 


A. web.xml 


B. server.xml 
C. ejb-jar.xml 
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D. service-config.xml 


Answer: A 


Question: 10 


A developer creates the following web service: 


@WebService 
public class Invoice { 


Assuming that he packages the class in a war file without deployment descriptors, the web service is 
hosted by a EE container relative to module context at ? (Choose one) 


A. "/Invoice" 

B. "/InvoicePort" 

C. "/InvoiceService" 

D. "/InvoiceWebService" 


Answer: C 
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